Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File: BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier: 3Z0+rc6x+9bxpzFfttoAr7FECq62ZjIpNyzG50hou/c=
Subject key identifier: A2:F9:DA:40:2D:63:84:16:AB:A5:29:0F:64:69:75:73:B4:8D:44:D3
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 0199FB7CE1673487BF0C24169ABAFF6B99F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:29 +0000
Manifest this update: Sun 19 Oct 2025 08:01:29 +0000
Manifest next update: Mon 20 Oct 2025 08:01:29 +0000
Files and hashes: 1: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: vkIzqCjChHJeq+01egf/LiHL0r0XtSBJHX94k4imBO0=)
2: F5ASQ_x2NzqLG2YPK-IJMnC68oA.roa (hash: rL17KB2ZeYz5uA3Maczd8dyCWpJw7h3YziKqc9PF9RM=)
3: fKRgm3J38CdqPYWraPnwaBHZfSw.roa (hash: faZcv/HNNKoTcf9eyD+mOEilysgTYS2fYEJ0tHKXiUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e1:67:34:87:bf:0c:24:16:9a:ba:ff:6b:99:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Oct 19 08:01:29 2025 GMT
Not After : Oct 20 08:01:29 2025 GMT
Subject: CN=a2f9da402d638416aba5290f64697573b48d44d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:28:5e:98:d0:87:a5:de:b5:bd:c8:a5:4d:
b9:02:2b:ee:cc:7b:77:69:40:a1:a7:38:00:fb:86:
de:c0:bd:53:9e:f3:e3:3b:1a:96:f6:1b:ab:fc:16:
34:0d:3e:98:cd:02:68:13:2a:2f:be:7e:3f:46:c0:
c0:f9:98:8a:56:16:62:a0:2c:cf:54:d4:11:9d:08:
2f:7b:62:58:42:10:c7:c6:d0:33:2b:24:9e:f8:c5:
bc:67:ce:50:64:c7:84:6e:81:3f:9e:94:6e:0a:86:
a7:93:ca:99:c8:96:4a:3a:ef:21:e6:c0:ef:5c:d0:
81:ad:14:d4:33:84:7e:ef:6a:de:10:51:b6:63:3a:
87:10:f7:15:49:d9:f1:af:e5:d7:96:13:af:41:58:
ec:52:3b:87:92:a7:39:1c:0d:e6:bb:e5:22:af:70:
36:10:74:ab:b3:43:1f:2c:d6:01:d3:5b:20:1a:8b:
17:a7:9b:6a:e6:9e:c0:8a:9c:92:46:c9:6d:17:67:
df:3a:6f:cf:80:46:3f:e6:29:12:76:f6:15:86:d3:
6c:2f:b0:bf:0d:ce:1b:b3:b1:e7:d5:7c:b5:45:79:
f2:00:13:e1:a5:00:4c:c9:83:6a:8e:d4:eb:c3:be:
db:ef:d6:23:e2:37:a6:91:20:96:04:c6:17:e9:c8:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F9:DA:40:2D:63:84:16:AB:A5:29:0F:64:69:75:73:B4:8D:44:D3
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d3:02:13:64:b3:3a:bd:0e:0f:89:f6:70:df:a0:0d:3b:fc:
56:4d:19:73:05:c4:3c:e2:cc:bb:be:81:a2:7e:7a:e6:59:60:
45:cc:c6:8c:bd:10:67:7d:ac:76:e5:db:60:06:62:c1:cf:69:
af:69:7a:8f:ff:da:e2:04:32:91:bc:f4:d9:7a:6d:e3:b3:1c:
be:44:58:64:66:61:2c:9a:83:41:f6:a5:9f:2e:fa:2d:79:62:
92:b3:50:fc:13:6e:ee:0e:0d:c3:bd:cb:09:a2:38:93:33:21:
20:33:7b:a2:9a:e6:40:bb:df:44:dc:84:49:6e:7f:aa:8b:10:
ae:fb:8c:ae:c2:b1:4a:b6:14:db:fb:fb:7d:9e:06:4a:7a:47:
af:41:57:d7:73:3b:d1:88:0a:67:a0:e4:1c:3d:e0:73:26:b1:
40:a1:4e:8c:84:a5:9a:bf:28:58:a5:2d:00:e9:34:59:2f:2a:
60:06:e0:87:dd:0f:ee:44:25:58:4f:16:0a:e6:69:56:03:cb:
77:1a:49:49:61:d6:85:72:94:c7:4a:3c:5a:cc:4f:78:e6:f2:
e5:ba:e0:78:a3:22:f6:7f:09:d9:e8:5c:23:ef:32:a2:45:ca:
6b:33:d4:ef:63:a8:65:39:b5:e5:bd:97:15:d2:25:2d:34:be:
cb:13:a4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:54 2025 by rpki-client